0d709ff542e6b70a8aa9ac8bc4fed88f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d709ff542e6b70a8aa9ac8bc4fed88f_JaffaCakes118
Size

2.8MB
MD5

0d709ff542e6b70a8aa9ac8bc4fed88f
SHA1

05acf6e021334748a79a987a6b703243d6e17183
SHA256

21aa70ed991b96a18744564b167ff922f68e82c4da1d567f72c9ab0696132261
SHA512

ebbee99f3ac66ef4147dad5fd12e1b23c6fab46b0eb60584a43ac6a47fc8fee4c1de539ede0d77762b409099c38ac6eb1cf92785bea0beb9510765d5daafa806
SSDEEP

49152:wGOj8YeyYg1v+3NC4mT4Tobi3j5FZc2b0M0M0FQSx0TC7:wLj8Yes1v+3Vb62b0M0M2d0O7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d709ff542e6b70a8aa9ac8bc4fed88f_JaffaCakes118

Files

0d709ff542e6b70a8aa9ac8bc4fed88f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 51KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ